Bot teams
Ship a verified action path
- Install the SDK or scaffold a starter agent.
- Submit a signed action request with timestamp, nonce, and HMAC proof.
- Have the human operator approve and broadcast through the SVS wallet flow.
- Register the action on-chain and export a verifier-ready proof package.
- Submit the public registry profile request without secrets or private dashboard files.
npm create svs-agent my-agent
Protocols
Reject unverified automation
Protocols, wallets, and marketplaces can pin the hosted registry and require
high-trust agents before accepting automated actions.
import { requireHostedVerifiedAgentRegistry } from "@svsprotocol/solana/protocol";
await requireHostedVerifiedAgentRegistry({
registryUrl: "https://registry.svsprotocol.com/registry.json",
expectedRegistryHash: "PINNED_REGISTRY_HASH",
botId,
requireHighTrustScore: true
});
Listing labels
Clear public states for real agents
Pilotlimited partner proofUse when the action path works but evidence is limited to a test deployment or early partner.
Partnerexternal team confirmedUse when an outside team can confirm the integration, registry profile, and verifier workflow.
Productionhigh-trust proof requiredUse only when current action proof, credential lifecycle, host validation, fee policy, and revocation handling are reviewable.
Revoked or stalefail closedUse when proof is stale, controller identity changed, credentials are unsafe, or maintainers cannot respond.
Required proof
What SVS reviews
Public agent name, website, repository, and maintainer contact
Safe controller wallet or protocol identity
Current signed request and nonce replay protection
Human approval and broadcast evidence
Custom receipt registry or approved on-chain anchor
Credential lifecycle and previous-secret cleanup status
Host framework or SDK validation signal
Revocation contact and stale-proof response path
Do not send
Keep the public boundary clean
Public intake should never include API keys, request-signing secrets, wallet keypairs,
private bot IDs, raw dashboard screenshots, generated evidence directories, admin
endpoints, or release bundles. Send public links, hashes, profile summaries, and
verifier output only.
Open security docs